[rt-users] RE: Confused by Custom field rights

[Philip Kime]

Actually, you're quite right - I hadn't factored in that CFs can be
applied to different Queues.

PK 

-----Original Message-----
From: Kenneth Crocker [mailto:KFCrocker at lbl.gov] 
Sent: 01 June 2006 09:53
To: Philip Kime
Cc: Joshua Colson; RT users
Subject: Re: [rt-users] RE: Confused by Custom field rights

Philip Kime wrote:
> Perfect, this works, thanks. It still seems to be a bit strange that 
> Custom fields  aren't considered part of a ticket/asset for the 
> ModifyTicket/ModifyAsset rights ...
>
> PK
>
> -----Original Message-----
> From: Joshua Colson [mailto:jcolson at voidgate.org]
> Sent: 30 May 2006 13:17
> To: Philip Kime
> Cc: RT users
> Subject: Re: [rt-users] Confused by Custom field rights
>
>
> Create a group for each set of users (if you haven't already) and 
> assign the ModifyCustomField right for each individual custom field to

> the group. Use RTx::RightsMatrix to make it easier.
>
> HTH
>
> --
> Joshua Colson <jcolson at voidgate.org>
>
> _______________________________________________
> http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users
>
> Community help: http://wiki.bestpractical.com Commercial support: 
> sales at bestpractical.com
>
>
> Discover RT's hidden secrets with RT Essentials from O'Reilly Media. 
> Buy a copy at http://rtbook.bestpractical.com
>
>
> We're hiring! Come hack Perl for Best Practical: 
> http://bestpractical.com/about/jobs.html
>
>
>   
Philip,

    Actually, since it only makes sense to give privileges to groups and
then add users to groups (that way you are not continually doing the
same redundant work for every user you want to get to a Queue and you
don't have tons of users' rights to maintain) it also makes sense to do
the same thing for custom fields. If a GROUP has certain rights to a
Queue (set up in configuration) and a Custom field can be applied to any
number of Queues, it allows more flexibility to also require group
access to a custom field, because you may have more than 1 group
accessing a Queue and one group you may WANT to modify custom fields and
another you don't. Does that make sense?

Kenn